397 lines
12 KiB
C++
397 lines
12 KiB
C++
/**
|
|
* SslConnected.h
|
|
*
|
|
* The actual tcp connection over SSL
|
|
*
|
|
* @copyright 2018 copernica BV
|
|
*/
|
|
|
|
/**
|
|
* Include guard
|
|
*/
|
|
#pragma once
|
|
|
|
/**
|
|
* Dependencies
|
|
*/
|
|
#include "tcpoutbuffer.h"
|
|
#include "tcpinbuffer.h"
|
|
#include "poll.h"
|
|
#include "sslwrapper.h"
|
|
#include "sslshutdown.h"
|
|
|
|
/**
|
|
* Set up namespace
|
|
*/
|
|
namespace AMQP {
|
|
|
|
/**
|
|
* Class definition
|
|
*/
|
|
class SslConnected : public TcpExtState
|
|
{
|
|
private:
|
|
/**
|
|
* The SSL structure
|
|
* @var SslWrapper
|
|
*/
|
|
SslWrapper _ssl;
|
|
|
|
/**
|
|
* The outgoing buffer
|
|
* @var TcpBuffer
|
|
*/
|
|
TcpOutBuffer _out;
|
|
|
|
/**
|
|
* The incoming buffer
|
|
* @var TcpInBuffer
|
|
*/
|
|
TcpInBuffer _in;
|
|
|
|
/**
|
|
* Are we now busy with sending or receiving?
|
|
* @var enum
|
|
*/
|
|
enum State {
|
|
state_idle,
|
|
state_sending,
|
|
state_receiving
|
|
} _state;
|
|
|
|
/**
|
|
* Should we close the connection after we've finished all operations?
|
|
* @var bool
|
|
*/
|
|
bool _closed = false;
|
|
|
|
/**
|
|
* Cached reallocation instruction
|
|
* @var size_t
|
|
*/
|
|
size_t _reallocate = 0;
|
|
|
|
|
|
/**
|
|
* Proceed with the next operation after the previous operation was
|
|
* a success, possibly changing the filedescriptor-monitor
|
|
* @return TcpState*
|
|
*/
|
|
TcpState *proceed()
|
|
{
|
|
// if we still have an outgoing buffer we want to send out data
|
|
if (_out)
|
|
{
|
|
// let's wait until the socket becomes writable
|
|
_parent->onIdle(this, _socket, readable | writable);
|
|
}
|
|
else if (_closed)
|
|
{
|
|
// start the state that closes the connection
|
|
return new SslShutdown(this, std::move(_ssl));
|
|
}
|
|
else
|
|
{
|
|
// let's wait until the socket becomes readable
|
|
_parent->onIdle(this, _socket, readable);
|
|
}
|
|
|
|
// done
|
|
return this;
|
|
}
|
|
|
|
/**
|
|
* Method to repeat the previous call\
|
|
* @param monitor monitor to check if connection object still exists
|
|
* @param state the state that we were in
|
|
* @param result result of an earlier SSL_get_error call
|
|
* @return TcpState*
|
|
*/
|
|
TcpState *repeat(const Monitor &monitor, enum State state, int error)
|
|
{
|
|
// check the error
|
|
switch (error) {
|
|
case SSL_ERROR_WANT_READ:
|
|
// remember state
|
|
_state = state;
|
|
|
|
// the operation must be repeated when readable
|
|
_parent->onIdle(this, _socket, readable);
|
|
|
|
// allow chaining
|
|
return monitor.valid() ? this : nullptr;
|
|
|
|
case SSL_ERROR_WANT_WRITE:
|
|
// remember state
|
|
_state = state;
|
|
|
|
// wait until socket becomes writable again
|
|
_parent->onIdle(this, _socket, readable | writable);
|
|
|
|
// allow chaining
|
|
return monitor.valid() ? this : nullptr;
|
|
|
|
case SSL_ERROR_NONE:
|
|
// we're ready for the next instruction from userspace
|
|
_state = state_idle;
|
|
|
|
// turns out no error occured, an no action has to be rescheduled
|
|
_parent->onIdle(this, _socket, _out || _closed ? readable | writable : readable);
|
|
|
|
// allow chaining
|
|
return monitor.valid() ? this : nullptr;
|
|
|
|
default:
|
|
// report an error to user-space
|
|
_parent->onError(this, "ssl protocol error");
|
|
|
|
// ssl level error, we have to tear down the tcp connection
|
|
return monitor.valid() ? new TcpClosed(this) : nullptr;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Parse the received buffer
|
|
* @param monitor object to check the existance of the connection object
|
|
* @param size number of bytes available
|
|
* @return TcpState
|
|
*/
|
|
TcpState *parse(const Monitor &monitor, size_t size)
|
|
{
|
|
// we need a local copy of the buffer - because it is possible that "this"
|
|
// object gets destructed halfway through the call to the parse() method
|
|
TcpInBuffer buffer(std::move(_in));
|
|
|
|
// parse the buffer
|
|
auto processed = _parent->onReceived(this, buffer);
|
|
|
|
// "this" could be removed by now, check this
|
|
if (!monitor.valid()) return nullptr;
|
|
|
|
// shrink buffer
|
|
buffer.shrink(processed);
|
|
|
|
// restore the buffer as member
|
|
_in = std::move(buffer);
|
|
|
|
// do we have to reallocate?
|
|
if (!_reallocate) return this;
|
|
|
|
// reallocate the buffer
|
|
_in.reallocate(_reallocate);
|
|
|
|
// we can remove the reallocate instruction
|
|
_reallocate = 0;
|
|
|
|
// done
|
|
return this;
|
|
}
|
|
|
|
/**
|
|
* Check if the socket is readable
|
|
* @return bool
|
|
*/
|
|
bool isReadable() const
|
|
{
|
|
// object to poll a socket
|
|
Poll poll(_socket);
|
|
|
|
// wait until socket is readable, but do not block
|
|
return poll.readable(false);
|
|
}
|
|
|
|
/**
|
|
* Check if the socket is writable
|
|
* @return bool
|
|
*/
|
|
bool isWritable() const
|
|
{
|
|
// object to poll a socket
|
|
Poll poll(_socket);
|
|
|
|
// wait until socket is writable, but do not block
|
|
return poll.writable(false);
|
|
}
|
|
|
|
/**
|
|
* Perform a write operation
|
|
* @param monitor object to check the existance of the connection object
|
|
* @return TcpState*
|
|
*/
|
|
TcpState *write(const Monitor &monitor)
|
|
{
|
|
// assume default state
|
|
_state = state_idle;
|
|
|
|
// we are going to check for errors after the openssl operations, so we make
|
|
// sure that the error queue is currently completely empty
|
|
OpenSSL::ERR_clear_error();
|
|
|
|
// because the output buffer contains a lot of small buffers, we can do multiple
|
|
// operations till the buffer is empty (but only if the socket is not also
|
|
// readable, because then we want to read that data first instead of endless writes
|
|
do
|
|
{
|
|
// try to send more data from the outgoing buffer
|
|
auto result = _out.sendto(_ssl);
|
|
|
|
// we may have to repeat the operation on failure
|
|
if (result > 0) continue;
|
|
|
|
// check for error
|
|
auto error = OpenSSL::SSL_get_error(_ssl, result);
|
|
|
|
// the operation failed, we may have to repeat our call
|
|
return repeat(monitor, state_sending, error);
|
|
}
|
|
while (_out && !isReadable());
|
|
|
|
// proceed with the read operation or the event loop
|
|
return isReadable() ? receive(monitor) : proceed();
|
|
}
|
|
|
|
/**
|
|
* Perform a receive operation
|
|
* @param monitor object to check the existance of the connection object
|
|
* @return TcpState
|
|
*/
|
|
TcpState *receive(const Monitor &monitor)
|
|
{
|
|
// we are going to check for errors after the openssl operations, so we make
|
|
// sure that the error queue is currently completely empty
|
|
OpenSSL::ERR_clear_error();
|
|
|
|
// start a loop
|
|
do
|
|
{
|
|
// assume default state
|
|
_state = state_idle;
|
|
|
|
// read data from ssl into the buffer
|
|
auto result = _in.receivefrom(_ssl, _parent->expected());
|
|
|
|
// if this is a failure, we are going to repeat the operation
|
|
if (result <= 0) return repeat(monitor, state_receiving, OpenSSL::SSL_get_error(_ssl, result));
|
|
|
|
// go process the received data
|
|
auto *nextstate = parse(monitor, result);
|
|
|
|
// leap out if we moved to a different state
|
|
if (nextstate != this) return nextstate;
|
|
}
|
|
while (OpenSSL::SSL_pending(_ssl) > 0);
|
|
|
|
// proceed with the write operation or the event loop
|
|
return _out && isWritable() ? write(monitor) : proceed();
|
|
}
|
|
|
|
|
|
public:
|
|
/**
|
|
* Constructor
|
|
* @param state The previous state
|
|
* @param ssl The SSL structure
|
|
* @param buffer The buffer that was already built
|
|
*/
|
|
SslConnected(TcpExtState *state, SslWrapper &&ssl, TcpOutBuffer &&buffer) :
|
|
TcpExtState(state),
|
|
_ssl(std::move(ssl)),
|
|
_out(std::move(buffer)),
|
|
_in(4096),
|
|
_state(_out ? state_sending : state_idle)
|
|
{
|
|
// tell the handler to monitor the socket if there is an out
|
|
_parent->onIdle(this, _socket, _state == state_sending ? readable | writable : readable);
|
|
}
|
|
|
|
/**
|
|
* Destructor
|
|
*/
|
|
virtual ~SslConnected() noexcept = default;
|
|
|
|
/**
|
|
* Number of bytes in the outgoing buffer
|
|
* @return std::size_t
|
|
*/
|
|
virtual std::size_t queued() const override { return _out.size(); }
|
|
|
|
/**
|
|
* Process the filedescriptor in the object
|
|
* @param monitor Object that can be used to find out if connection object is still alive
|
|
* @param fd The filedescriptor that is active
|
|
* @param flags AMQP::readable and/or AMQP::writable
|
|
* @return New implementation object
|
|
*/
|
|
virtual TcpState *process(const Monitor &monitor, int fd, int flags) override
|
|
{
|
|
// the socket must be the one this connection writes to
|
|
if (fd != _socket) return this;
|
|
|
|
// if we were busy with a write operation, we have to repeat that
|
|
if (_state == state_sending) return write(monitor);
|
|
|
|
// same is true for read operations, they should also be repeated
|
|
if (_state == state_receiving) return receive(monitor);
|
|
|
|
// if the socket is readable, we are going to receive data
|
|
if (flags & readable) return receive(monitor);
|
|
|
|
// socket is not readable (so it must be writable), do we have data to write?
|
|
if (_out) return write(monitor);
|
|
|
|
// the only scenario in which we can end up here is the socket should be
|
|
// closed, but instead of moving to the shutdown-state right, we call proceed()
|
|
// because that function is a little more careful
|
|
return proceed();
|
|
}
|
|
|
|
/**
|
|
* Send data over the connection
|
|
* @param buffer buffer to send
|
|
* @param size size of the buffer
|
|
*/
|
|
virtual void send(const char *buffer, size_t size) override
|
|
{
|
|
// put the data in the outgoing buffer
|
|
_out.add(buffer, size);
|
|
|
|
// if we're already busy with sending or receiving, we first have to wait
|
|
// for that operation to complete before we can move on
|
|
if (_state != state_idle) return;
|
|
|
|
// let's wait until the socket becomes writable
|
|
_parent->onIdle(this, _socket, readable | writable);
|
|
}
|
|
|
|
/**
|
|
* Gracefully close the connection
|
|
* @return TcpState The next state
|
|
*/
|
|
virtual TcpState *close() override
|
|
{
|
|
// remember that the object is going to be closed
|
|
_closed = true;
|
|
|
|
// if the previous operation is still in progress we can wait for that
|
|
if (_state != state_idle) return this;
|
|
|
|
// the connection can be closed right now, move to the next state
|
|
return new SslShutdown(this, std::move(_ssl));
|
|
}
|
|
|
|
/**
|
|
* Install max-frame size
|
|
* @param heartbeat suggested heartbeat
|
|
*/
|
|
virtual void maxframe(size_t maxframe) override
|
|
{
|
|
// remember that we have to reallocate (_in member can not be accessed because it is moved away)
|
|
_reallocate = maxframe;
|
|
}
|
|
};
|
|
|
|
/**
|
|
* End of namespace
|
|
*/
|
|
}
|